$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft File: aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft (raw, json) Hash identifier: vMq8URyA47MZIEVekuvJZ0K2Ythx/9VtY88lIvV1dxE= Subject key identifier: 6D:71:13:CF:E6:D2:B8:6A:92:58:12:DB:DF:77:63:D1:63:3E:7C:E6 Authority key identifier: 69:0C:72:9F:18:39:05:64:D6:70:B1:8F:77:74:75:4E:5D:27:99:51 Certificate issuer: /CN=A91DC146/serialNumber=690C729F18390564D670B18F7774754E5D279951 Certificate serial: 0647 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQxynxg5BWTWcLGPd3R1Tl0nmVE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft Manifest number: 0642 Signing time: Tue 04 Nov 2025 22:45:56 +0000 Manifest this update: Tue 04 Nov 2025 22:45:55 +0000 Manifest next update: Tue 11 Nov 2025 22:45:55 +0000 Files and hashes: 1: aQxynxg5BWTWcLGPd3R1Tl0nmVE.crl (hash: j3byls9TsdGeVOBlPmfozcMlxgDNh7kC1aUTO+xfNVQ=) 2: 4BB44892AE1111EBB4C2DA11C4F9AE02.roa (hash: JNSnvB3lv0/9vnQPkUAqkaUeoo68hc8fXSyVzWlD/Po=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.crl rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQxynxg5BWTWcLGPd3R1Tl0nmVE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:45:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1607 (0x647) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC146, serialNumber=690C729F18390564D670B18F7774754E5D279951 Validity Not Before: Nov 4 22:45:55 2025 GMT Not After : Nov 11 22:45:55 2025 GMT Subject: CN=690a8224-c40b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f8:2d:e4:3b:a1:a2:48:92:d5:29:5d:88:89: 1e:30:c6:84:32:08:c8:2d:8b:e1:93:f6:c8:15:be: da:c8:ee:b6:aa:e5:24:65:be:ae:a5:95:e5:23:1f: 0b:45:6f:0b:d4:0a:ce:78:5b:c6:41:e5:1c:be:65: ea:2a:16:41:b2:ca:05:59:9f:f5:7f:2c:fa:df:f6: 20:f8:a1:8b:70:9a:f7:9e:6b:34:11:3a:58:a4:15: 40:aa:26:94:dc:1d:71:f4:51:e9:fa:d2:22:5d:61: cd:6f:16:c9:92:05:38:9e:50:5d:48:58:c4:66:f6: 77:d1:2b:50:40:56:6e:f3:9f:06:be:af:fa:b3:04: 64:76:28:4b:bd:bc:56:f1:e4:35:ea:cb:d3:5a:59: 83:97:e1:6b:6c:0b:bd:75:46:c4:7c:d1:1f:f9:99: 94:cd:55:d8:df:1f:e6:f9:d9:26:1b:ac:55:af:f4: db:99:d4:85:85:ad:55:da:f3:20:e9:17:3c:3d:40: 58:7d:94:f6:44:d4:da:94:5e:6b:1c:80:59:64:4b: 28:78:8f:20:5a:df:34:e5:00:03:e5:18:aa:e2:7e: 22:85:50:73:25:78:9e:3c:b6:ee:f6:8e:37:69:85: 91:b0:5d:66:bc:b6:09:61:1c:b7:dc:c5:b5:55:ef: de:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:71:13:CF:E6:D2:B8:6A:92:58:12:DB:DF:77:63:D1:63:3E:7C:E6 X509v3 Authority Key Identifier: keyid:69:0C:72:9F:18:39:05:64:D6:70:B1:8F:77:74:75:4E:5D:27:99:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQxynxg5BWTWcLGPd3R1Tl0nmVE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:48:12:32:6f:7a:ea:f6:de:a9:10:e0:bb:c5:62:41:cc:b0: 67:9f:98:71:d7:6b:e3:de:79:ca:41:22:5e:c2:c5:30:1a:a7: af:ee:98:5c:2b:52:c5:1d:7f:3b:cf:50:e5:00:86:13:48:15: 92:22:1d:08:0d:61:1d:2a:b4:65:e0:46:3e:23:e9:80:bc:04: 2e:dc:f2:22:dd:ac:9c:06:f7:de:79:5a:c5:b9:53:7a:f3:88: 53:e7:77:e8:5c:fd:d1:8e:c8:9a:78:e6:dc:eb:90:b9:c0:25: 51:9f:fa:35:fb:1b:8a:0f:55:b5:68:88:89:fe:ce:5f:fe:bb: 5d:04:35:e9:50:9c:d4:02:d5:66:9f:db:22:54:0c:d8:cc:cf: 86:1e:4b:61:80:7e:2c:56:c4:a1:28:1d:58:ed:c5:90:f8:48: c9:57:b1:9b:f5:73:13:fa:db:b1:92:42:21:51:b1:27:22:ee: a7:1c:e7:18:a0:1a:ed:c0:74:df:c1:d4:b8:d1:06:f5:30:65: 4a:be:50:86:5a:fb:b0:30:99:73:9d:51:a9:4b:2a:1a:5a:c5: 0f:64:8c:61:a0:65:53:cf:55:40:31:ce:6e:eb:cf:7e:37:59: b9:63:af:71:5a:f7:64:ef:53:16:88:98:8f:84:e6:d4:03:98: ba:e1:ae:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMxNDYxMTAvBgNVBAUTKDY5MEM3MjlGMTgzOTA1NjRENjcwQjE4Rjc3NzQ3NTRF NUQyNzk5NTEwHhcNMjUxMTA0MjI0NTU1WhcNMjUxMTExMjI0NTU1WjAYMRYwFAYD VQQDEw02OTBhODIyNC1jNDBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwfgt5DuhokiS1SldiIkeMMaEMgjILYvhk/bIFb7ayO62quUkZb6upZXlIx8L RW8L1ArOeFvGQeUcvmXqKhZBssoFWZ/1fyz63/Yg+KGLcJr3nms0ETpYpBVAqiaU 3B1x9FHp+tIiXWHNbxbJkgU4nlBdSFjEZvZ30StQQFZu858Gvq/6swRkdihLvbxW 8eQ16svTWlmDl+FrbAu9dUbEfNEf+ZmUzVXY3x/m+dkmG6xVr/TbmdSFha1V2vMg 6Rc8PUBYfZT2RNTalF5rHIBZZEsoeI8gWt805QAD5Riq4n4ihVBzJXiePLbu9o43 aYWRsF1mvLYJYRy33MW1Ve/e9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG1xE8/m 0rhqklgS2993Y9FjPnzmMB8GA1UdIwQYMBaAFGkMcp8YOQVk1nCxj3d0dU5dJ5lR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzE0Ni9EQUE3NjQ5MkFF MEUxMUVCOEFCQTMzNERDNEY5QUUwMi9hUXh5bnhnNUJXVFdjTEdQZDNSMVRsMG5t VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FReHlueGc1QldUV2NMR1BkM1IxVGwwbm1WRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzE0Ni9EQUE3NjQ5MkFFMEUxMUVCOEFCQTMzNERDNEY5QUUwMi9hUXh5bnhnNUJX VFdjTEdQZDNSMVRsMG5tVkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlSBIyb3rq9t6pEOC7xWJBzLBnn5hx12vj3nnKQSJewsUwGqev7phc K1LFHX87z1DlAIYTSBWSIh0IDWEdKrRl4EY+I+mAvAQu3PIi3aycBvfeeVrFuVN6 84hT53foXP3RjsiaeObc65C5wCVRn/o1+xuKD1W1aIiJ/s5f/rtdBDXpUJzUAtVm n9siVAzYzM+GHkthgH4sVsShKB1Y7cWQ+EjJV7Gb9XMT+tuxkkIhUbEnIu6nHOcY oBrtwHTfwdS40Qb1MGVKvlCGWvuwMJlznVGpSyoaWsUPZIxhoGVTz1VAMc5u689+ N1m5Y69xWvdk71MWiJiPhObUA5i64a5X -----END CERTIFICATE-----Generated at Wed Nov 5 05:10:38 2025 by rpki-client